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METHOD AND APPLICATION FOR REMOVING MATERIAL FROM 
DOCUMENTS FOR EXTERNAL SOURCES 

BACKGROUND OF THE INVENTION 

[0001] The present invention relates generally to a method and application for an 
internal source to remove material from a document that is to be distributed to an 
external source. More specifically, the present invention is directed to a method and 
application for "sanitizing" a document by eliminating or removing restricted military 
and commercial export controlled information and/or company or organizational 
specific intellectual property information from the document, in order to identify and 
provide selected portions of the document to an external source under appropriate 
legal conditions. 

[0002] Frequently, a company or organization driven by the demands of doing 
business on an international scale may want to utilize an external or global source to 
complete engineering analysis and design projects. The external or global source can 
be located within the United States, but, many times, can be located outside of the 
United States. The decision to use an external source may be based on economic 
considerations, on the expertise of the external source, or for any other of a number of 
reasons. While an increase in the quantity of engineering analysis and design projects 
that are being transferred to external or global sources by a company or organization 
can result in increased engineering productivity, it also creates additional 
administrative and logistical burdens. 

[0003] The U.S. Government has established many regulations, controls and 
policies concerning the transfer of military and commercial technical information to 
foreign persons, foreign corporations and foreign governments. Some of these 
regulations, controls and policies can be referred to as export controls and are 
implemented to restrict or limit the access by foreign or unauthorized persons to 
technical data or other important information. In addition, a company or organization 
may also have its own internal procedures and policies to prevent the company's own 
intellectual property and proprietary information from being provided to a foreign or 
unauthorized person. An example of a company intellectual property policy is that a 
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company will only provide or share information with an external source on a "need- 
to-know" basis per legal business arrangements. 

[0004] When a company uses an external source for an engineering project, 
especially an external source that is a foreign person or foreign company, the 
company has to ensure that any information or technology that is provided to the 
external source is in compliance with the export controls of the U.S. government and 
with the company's own internal intellectual property policies. To ensure compliance 
with export controls and intellectual property policies, a company often implements 
appropriate procedures and policies to limit the access of information to foreign and 
other persons. The policies and procedures for complying with export controls and 
intellectual property policies can include steps of preparing a document with all 
technical and proprietary information removed and conducting a review of the 
prepared document. 

[0005] Current processes for sanitizing documents for external sources have 
involved the preparation of sanitized documents exclusive to each individual external 
source. These processes results in the creation of new sanitized documents each time 
documents are to be sent to an external source, even though the base document may 
be the same for the external sources. In addition, under the current processes there is 
a high probability of unauthorized disclosure of restricted information due to 
inconsistencies in document preparation and review. Other drawbacks of the current 
processes include a possibility of incomplete information content provided to each 
external source, a lack of version control over documentation, and a duplication of 
review efforts on multiple sanitized versions of the same document that can result in a 
loss of productivity. 

[0006] One example of a technique that attempts to manage removal of sensitive 
information from a message is shown in U.S. Patent No. 5,960,080 (the '080 patent). 
The '080 patent is directed to a technique for removing sensitive information from a 
message by replacing the sensitive information with a generic token to generate a 
sanitized message that can be processed by an unsecured source. The sensitive 
information removed from the message includes names, addresses, dates, times and 
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numbers contained in the message. The removed sensitive information is then stored 
in a file and transmitted to the final, external, recipient of the message using secure 
and trusted sources and techniques after the unsecured interim source has finished 
their processing of the sanitized message. The sensitive information that was 
previously removed is then combined with the sanitized message at the external 
recipient's location to recreate a secured and processed version of the original 
message. In this arrangement, the sanitized message can be provided to an unsecured 
or untrusted external source, such as foreign language translator, for processing or 
servicing because all sensitive information has been removed from the sanitized 
message. 

[0007] The technique in the '080 patent is useful in ensuring the security of 
sensitive information included in a message as it is processed, in the interim, by an 
unsecured external source prior to being transferred to a final secured external 
recipient. However, the '080 patent does not address the removal of technical 
information or intellectual property information included within the message as 
intended for distribution to the final external recipient because the sensitive 
information that was removed from the message for the untrusted source is re-inserted 
into the message for the final external source. In the '080 patent, an unsecured or 
untrusted source is used as a interim processing medium for content that is not to be 
shared outside of the initial and final parties. In addition, the technique in the '080 
patent results in the removal of sensitive information each time a message is sent to a 
recipient, which results in some of the drawbacks discussed above including possible 
disclosure of unauthorized information and duplication of the review process. 

[0008] Therefore, what is needed is an application and process that is available 
company-wide to assist an authorized user or author to electronically create, store, and 
edit documentation that is fully compliant with U.S Government and other company 
or organizational recognized legal restrictions such as all export controls and 
intellectual property policies, for distribution to authorized external or foreign 
sources. 
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SUMMARY OF THE INVENTION 

[0009] One embodiment of the present invention is directed to a method of 
generating a sanitized document. The method comprises obtaining a document that 
includes a plurality of types of information. Next, the document is reviewed to 
identify a preselected type of information in the document. The identified preselected 
type of information is then marked in the document to generate a marked document. 
The marked identified preselected type of information in the marked document is 
distinguishable from other types of information in the marked document. An 
application is executed on the marked document to generate a sanitized document and 
a log file. The marked identified preselected type of information is removed from the 
sanitized document and is included in the log file. The marked document, the 
sanitized document and the log file are stored in a database accessible by a plurality of 
users to provide the marked document, the sanitized document and the log file to 
internal and external sources per individually determined user and group defined 
access permissions. 

[0010] Another embodiment of the present invention is directed to a computer 
program product embodied on a computer readable medium and executable by a 
computer for generating a sanitized document. The computer program product 
comprising computer instructions for executing the step of obtaining of a draft 
document. The draft document includes both restricted information and unrestricted 
information. The computer program product also includes computer instructions for 
reviewing the draft document to identify the restricted information in the draft 
document and for tagging the identified restricted information in the draft document 
to generate a tagged document. The tagged restricted information in the tagged 
document is distinguishable from the unrestricted information in the tagged 
document. The tagged document is then processed to generate a sanitized document 
and a log file from the tagged document. The sanitized document includes the 
unrestricted information and the log file includes the tagged restricted information. 
Finally, the tagged document, the sanitized document and the log file is stored in a 
database. The tagged document, the sanitized document and the log file stored in the 
database are accessible by a plurality of users to provide to an external source. 
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[0011] Still another embodiment of the present invention is directed to a system 
for generating a sanitized document. The system includes a server computer having a 
storage device and a processor and a database being accessible by the server 
computer. The system also includes a sanitization application to remove preselected 
information from a document for an external source. The sanitization application is 
stored in the storage device of the server computer. The sanitization application 
further includes means for editing the document to designate the preselected 
information in the document, means for generating an issued document from the 
edited document, means for generating a sanitized document from the edited 
document, means for generating a log file from the edited document, and means for 
retrieving the sanitized document and the log file from the database. The issued 
document is stored in the database and includes both marked preselected information 
and other information. The sanitized document is stored in the database and omits the 
marked preselected information. The log file is stored in the database and includes 
the marked preselected information. The retrieved sanitized document and log file are 
providable to an external source. Finally, the system also includes at least one client 
computer in communication with said server computer. The sanitization application 
is accessible on said at least one client computer. 

[0012] One advantage of the present invention is that a document is created that 
can be freely provided to multiple external or global sources under the least common 
denominator, or the least restrictive export control, intellectual property or other legal 
condition. 

[0013] Another advantage of the present invention is that sanitized documents are 
stored in a central location and can be provided to authorized global or external 
sources without the need to re-sanitize the document, which results in document 
consistency because the identical sanitized document is being provided to multiple 
external sources. 

[0014] Still another advantage of the present invention is that restricted material 
removed from the external documentation is consistently identified and maintained 
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within the internal documents, thereby providing only one sanitized version of each 
internal document. 

[0015] Yet another advantage of the present invention is that productivity is 
improved because internal documents have to be reviewed only a single time and then 
sanitized documents can be sent to authorized external sources as necessary. 

[0016] Other features and advantages of the present invention will be apparent 
from the following more detailed description of the preferred embodiment, taken in 
conjunction with the accompanying drawings which illustrate, by way of example, the 
principles of the invention. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0017] Figure 1 illustrates schematically an overview of the development and 
handling of sanitized documents. 

[0018] Figure 2 illustrates a flow chart for sanitizing a document. 

[0019] Figure 3 illustrates a flow chart of the process of step 204 of Figure 2. 

[0020] Figure 4 illustrates a flow chart of the process of step 206 of Figure 2. 

[0021] Figure 5 illustrates a flow chart of the process of step 208 of Figure 2. 

[0022] Figure 6 illustrates a flow chart of the process of step 210 of Figure 2. 

[0023] Figure 7 illustrates a document to be sanitized as seen by an internal author 
sanitizing or editing the document. 

[0024] Figure 8 illustrates the sanitized document as seen by other authorized 
internal users. 

[0025] Figure 9 illustrates the sanitized document as seen by the authorized global 
source or external user. 
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[0026] Figure 10 illustrates a log file of the sanitized document with the material 
removed from the sanitized document as seen by authorized internal users. 

[0027] Whenever possible, the same reference numbers will be used throughout 
the figures to refer to the same parts. 

DETAILED DESCRIPTION OF THE INVENTION 

[0028] The present invention is directed to an application for assisting a user with 
the creation, editing, and storing of sanitized documents, i.e. documents where all 
restricted technical data and information have been removed. Preferably, the 
sanitization application is used by internal source engineers to prepare sanitized 
documents for use by authorized external sources associated with an engineering 
project. However, the present invention can be used to sanitize any type of document 
that includes identifiable restricted technical data or information for export or transfer 
of the document to external sources or foreign persons. An export is the actual 
shipment, transmission, or transfer of items (including military or commercial 
technical data and information) out of the United States or to foreign persons, whether 
in the United States or abroad, by any means. A foreign person is any person who is 
not a United States citizen, not a United States permanent resident (i.e. a green card 
holder), or not a protected individual under the Immigration and Naturalization Act. 
This includes foreign corporations (i.e., those not incorporated in the United States) 
and foreign governments or any subdivisions or agencies of foreign governments. A 
company's employees can also be foreign persons regardless of their employment 
status. 

[0029] The sanitization application can be used to create and store a master or 
original document in a central location for access by all authorized internal users. In 
addition, the sanitization application can also be used to remove restricted 
information, technical data and proprietary information from a master document, 
regardless of whether the master document is newly created or had been previously 
created and stored in a central location. When information and data is removed from 
a master document, a sanitized document and a document log file is generated by the 
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sanitization application. The sanitized document and document log file are also 
stored in a central location for access by all authorized internal users. 

[0030] The marked preselected information in the master document, when viewed 
by internal or company users, is identical to the original or master document, except 
that the information designated for removal from the original or master document is 
distinguished from the remaining text and/or graphics. In contrast, when viewed by 
an external or global source, the sanitized document does not include any of the 
information designated for removal from the original or master document. The 
document log file includes the information that was designated for removal from the 
original or master document. The log file can be viewed by authorized internal users 
to confirm what information has been removed from the document or to determine if 
specific contents of the log file can be provided to an external source under more 
restrictive export control licenses or appropriate legal arrangements. After making a 
determination to provide specific content included within the log file to an external or 
global source and taking some additional steps to ensure that appropriate security and 
authorization procedures have been followed, the specific content included within the 
log file can be transferred to the external or global source following the more 
restrictive U.S. Government export control license or company or organizational legal 
arrangements. 

[0031] In another embodiment of the present invention, the sanitization 
application can be incorporated as a component of a larger application that is executed 
within the larger application. The sanitization application can again be used to create, 
edit, and store sanitized documents, however, the generation, editing and storing of 
sanitized documents is now included as a portion of the larger application. The 
sanitization application's generation and storage of documents and files is 
accomplished in a manner that can be interpreted and understood by the larger 
application. 

[0032] In a preferred embodiment of the present invention, the sanitization 
application is implemented as a program or application or a series of programs or 
applications on a computer network that are executed in a web browser of the user or 
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engineer. The sanitization application can be executed on the client-side, the server- 
side or on both the client-side and the server-side. Preferably, the sanitization 
application is stored on a server computer and then accessed by authorized users on 
client computers. The sanitization application also has one or more databases that are 
used to store the master documents, the sanitized documents and the document log 
files. The databases are also preferably stored on the server computer and accessed 
by the authorized users on the client computers. In another embodiment, each client 
computer on the computer network may store an individual copy of the sanitization 
application and the corresponding databases for the individual sanitization 
applications can be stored on either a server computer or one or more of the client 
computers that are accessible by each authorized client computer. 

[0033] The computer network is preferably an Intranet, however any other type of 
network can also be used, for example, the Internet, a local area network (LAN), a 
wide area network (WAN) or an Extranet. The client computer and server computer 
can be any type of general purpose computer having memory or storage devices (e.g. 
RAM, ROM, hard disk, CD-ROM, etc.), processing units (e.g. CPU, ALU, etc.) and 
input/output devices (e.g. monitor, keyboard, mouse, printer, etc.). The general 
purpose computer may also have communication devices (e.g. modems, network 
cards, etc.) for connecting or linking the general purpose computer to other 
computers. 

[0034] In another embodiment of the present invention, the sanitization 
application can be executed without any requirement for a computer network or 
network connection. The sanitization application can be executed from an internal 
memory or storage device, e.g. RAM, ROM, hard disk, etc., of the computer of the 
user in either a web browser as discussed above or in an operating system 
environment, such as a Windows environment, a Linux environment or a Unix 
environment. The sanitization application can be loaded into the internal memory of 
the authorized user's computer from a portable medium such as a CD-ROM, DVD- 
ROM, floppy disk, etc., that is inserted into the computer. Alternatively, the 
sanitization application can be transferred or loaded directly into the internal memory 
of the authorized user's computer through an electronic connection with another 
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computer that has a stored copy of the sanitization application. In other words, the 
sanitization application can be downloaded to the authorized user's computer from 
another computer over a network connection or an Internet connection and can then 
be operated without the network connection. The user is able to use the sanitization 
application without a network connection and is able to store the master documents, 
sanitized documents, document log files and related information and documents in a 
database. However, for other users to be able to have access to the master documents, 
sanitized documents, document log files and related information and documents, the 
user has to reestablish a network connection and upload any master documents, 
sanitized documents, document log files and related information and documents into 
the common central database(s) that can be accessed by all authorized users. 

[0035] One type of document that is frequently used in engineering projects is a 
design practice. A design practice (DP) includes the documentation of proven design 
practices based on widely applied technology and experience in the company or 
organization. A design practice can include mandatory design and evaluation 
criteria/requirements, design approaches, analytical methods and/or references to 
sources, limits and other related information. In a preferred embodiment of the 
present invention, portions of the information contained within DPs are required for 
use by authorized users in engineering projects at both the internal and external 
sources and locations. It is to be understood that the use of design practice (DP) in 
this specification is not intended to be limiting, but is intended to include and refer to 
all types of documents. 

[0036] A schematic drawing illustrating the development and availability of a 
sanitized document or design practice (DP) is shown in Figure 1. An author 102 can 
access the sanitization application from an internal network or web site 100 to begin 
the development of a new draft DP 108. Alternatively, the author 102 can load or 
retrieve a previously created draft DP 108. Preferably, the draft DP 108 is in a word 
processing file format such as Microsoft Word, Corel WordPerfect or any other 
suitable word processing format. The draft DP 108 can be converted using the 
sanitization application and the process described in greater detail below, to a 
"sanitized" draft DP 110 and a "sanitized" draft DP log 112. The "sanitized" draft DP 
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110 and the "sanitized" draft DP log 112 are preferably generated in a portable file 
format that is read-only, such as Adobe's portable document format (.pdf) or any other 
suitable file format. 

[0037] In sanitizing the draft DP 108 to generate the "sanitized" draft DP 1 10 and 
the "sanitized" draft DP log 112, the author 102 has marked for elimination or 
removal from the draft DP 108, particular portions of text, tables, equations, graphics, 
drawings, etc. that include restricted information, technical data, process knowledge, 
controlled technologies or business intellectual property information. Technical data, 
as defined by U.S. Government export control regulations, can be information, when 
viewed on its own or in combination with other provided information, that is required 
for or would assist another in the design, development, production, manufacture, 
assembly, operation, repair, testing, maintenance or modification of commercial 
commodities or defense articles. This includes information in the form of drawings, 
blueprints, photographs, plans, instructions, and documentation whether written or 
recorded on some other media devices. A controlled technology is information and 
data identified by a company or organization, used in design, production, or service of 
a component which is critical to its superior performance, to quality, to a low-cost or 
to a unique company capability. Finally, restricted information can include technical 
data or process knowledge applicable or subject to U.S. Government export control 
regulations, U.S. military programs, and the company's or a third party's intellectual 
property policies that is not be made available to external sources, users, or foreign 
persons without established license or legal agreements. 

[0038] The draft DP 108, the sanitized draft DP 1 10 and the sanitized draft DP log 
112 can be reviewed by reviewers 104, which can include author 102, and then 
approved by approvers 106, which can include author 102 and reviewers 104. Once 
the draft DP 108, the sanitized draft DP 110 and the sanitized draft DP log 112 have 
been approved by approvers 106, the draft DP 108 is then converted into an issued DP 
114 that operates as a master document, a global export issued DP log 116 and a 
global export issued DP 118. The issued DP 114 is preferably converted into a 
HTML format or a read-only, portable file format, e.g. PDF. The global export issued 
DP log 1 16 and the global export issued DP 1 18 are preferably converted into a read- 
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only, portable file format, e.g. PDF. The global export issued DP log 116 includes a 
record of restricted information or content that has been removed from the global 
export issued DP 118 and was present in the issued DP 114. Each global export 
issued DP 118 has its own global export issued DP log 116. An empty global export 
issued DP log 116 will occur when no restricted information is identified for removal 
from the issued DP 114. An empty global export issued DP 118 will occur when the 
entire contents of an issued DP 1 14 is considered restricted information. 

[0039] The issued DP 114 and the global export issued DP log 116 are available 
on the internal network 100 to authorized internal engineers or users 120. The global 
export issued DP 118 is available to authorized internal engineers 120 and authorized 
global or external engineers or users 122 from a web site 124 that is accessible by 
both internal engineers 120 and global engineers 122. For example, the web site 124 
can be part of an Extranet that can be accessed by both internal engineers 120 and 
global engineers 122. However, while authorized internal engineers 120 can have 
access to all global export issued DPs 118 on web site 124, the global engineers 122 
are preferably limited to being able to access only global export issued DPs 118 that 
have been designated or assigned to the authorized global engineer 122 on web site 
124. 

[0040] Figure 2 illustrates the basic process for creating a sanitized document. 
The process begins at step 202 with the author 102 downloading, from a central 
location, a draft DP 108 that had been previously created by the author 102 creating a 
new draft DP 108. Next, in step 204, the author 102 identifies any restricted content 
or information in the draft DP 108. After the restricted content has been identified in 
step 204, the author 102 marks or tags the restricted content for removal from the 
draft DP 108 in step 206. In step 208, a macro, procedure or sub-application in the 
sanitization application is executed to remove the restricted content or information 
from the draft DP 108 that was tagged in step 206. The sanitization application 
creates the sanitized draft DP 110 and the sanitized draft DP log file 112 from draft 
DP 108 for review by the author 102. The author 102 verifies that the restricted 
content has been removed from the draft DP 108 and reviews the sanitized draft DP 
110 in step 210. In step 212, the author 102 determines if the draft DP 108, the 
- 12- 
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sanitized draft DP 1 10 and the sanitized draft DP log file 1 12 are ready for review by 
reviewers 104 and approvers 106 or for upload to the database for use by internal 
engineers 120. If the draft DP 108, the sanitized draft DP 1 10 and the sanitized draft 
DP log file 112 are not ready for review, approval or upload, the author 102 either 
returns to step 204 and continues to identify restricted content in the draft DP 108, or 
returns to step 206 and continues to tag or mark restricted content in the draft DP 108. 
If the draft DP 108, the sanitized draft DP 110 and the sanitized draft DP log file 112 
are ready for approval, the author 102 provides the approver 106 with the draft DP 
108, the sanitized draft DP 110 and the sanitized draft DP log file 112 for approval in 
step 214. After the approver 106 approves the draft DP 108, the sanitized draft DP 
i=j 110 and the sanitized draft DP log file 112, the issued DP 114, the global export 

|j issued DP log 1 16 and the global export issued DP 1 1 8 are generated and stored in the 

f|| central database using a process similar to that described above for creating the 

jj[ sanitized draft DP 1 10 and the sanitized draft DP log 1 12 from draft DP 108 with the 

sanitization application. After approval by approvers 106, in step 214, the issued DP 
p 114, the global export issued DP log 116 and the global export issued DP 118 are 

jjj available to authorized internal users 120 on web site 100, while the global export 

issued DP 1 18 is available to authorized global engineers 122 on web site 124. 

f|I 

[0041] In a preferred embodiment of the present invention, the process of Figure 
2, including the editing and sanitization of the draft DP 108, is completed by an 
author 102 familiar with the content and purpose of the draft DP 108. By being 
familiar with the content and purpose of the draft DP 108, the author 102 is better able 
to identify restricted information and content, and sections of the draft DP 108 that are 
considered to be regulated by U.S. Government export control regulations or unique 
to the company or organization's design, quality capability or intellectual property. 

[0042] Figure 3 illustrates a flow chart of the process of identifying restricted 
information from step 204 of Figure 2. To begin, after accessing or creating the draft 
DP 108 in step 202, the author 102 determines if help or assistance is needed in 
identifying the restricted content in step 302. If the author 102 does not require help 
in identifying restricted content, the author 102 can manually review the document for 
restricted content in step 304. After the document has been reviewed in step 304, the 
- 13- 
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author 102 determines if the review process is finished in step 306. If the review 
process is completed and the document does not require any additional reviewing, the 
author 102 can begin to tag or mark the restricted content for removal in step 206. 
Otherwise, the author 102 returns to step 302 to again determine if help is required in 
identifying restricted content. 

[0043] If help is desired in identifying restricted content in step 302, the author 
102 can either view documentation online in step 308 or can make a decision on 
executing a keyword search of the document in step 310. When the author 102 views 
documentation online in step 308, the author 102 can review lists of restricted articles 
and keywords 312 and information on restricted content from other authoring tools 
314 or other design practices 316. After the author 102 has finished viewing the 
online documentation in step 308, the author 102 returns to step 302 to determine if 
more help is required in identifying restricted content. 

[0044] The author 102 can also obtain help in identifying restricted content by 
making a decision on executing a keyword search in step 310. If the author does not 
desire to execute a keyword search, the author can review the document in step 304. 
However, if the author 102 desires to execute a keyword search on the document, the 
author 102 has to select the appropriate tool, macro or sub-application from the 
sanitization application in step 318. In step 320, the author 102 executes the sub- 
application or macro to identify the keywords in the document. The procedure for 
identifying keywords includes a search of the document for keywords and then 
highlighting those located keywords in the document. After the search and 
highlighting of keywords in the document is completed in step 320, the author 102 
can review the document or the draft DP 108 in step 304. 

[0045] To perform character or text searches on the document or draft DP 108, the 
author 102 has to access the search macro or sub-application of the sanitization 
application in step 318. The author 102 then enters a search term or terms as the 
search parameters. The author 102 can also have other options available to further 
define and refine the scope of the search. The author 102 can select an option to 
locate text in the draft DP 108 that has a "matching case," i.e. the text in the draft DP 
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108 that uses capital letters in the same locations as the search term(s). The author 
102 can also select a "matching exact word" option, thereby locating text in the draft 
DP 108 that is exactly identical to the search term(s). In preparing to execute the 
search in step 320, the author 102 may access a list 312 of terms and articles that are 
related to the subject matter of the draft DP 108 for assistance in the selection of the 
search terms to be used in the search. 

[0046] In another embodiment of the present invention, the author 102 can also 
perform character or text searches, which are described in steps 318-320, on the 
"sanitized" draft DP 110 in its portable or read-only format, e.g. in its PDF format, 
rather than on the draft DP 108 in its word processing format, e.g. in its Word format. 
By conducting the text search on the "sanitized" draft DP 110, the author 102 can 
review the content of the "sanitized" draft DP 110 one more time before it is released 
for approval in step 214. 

[0047] Preferably in step 304, the author 102 will read the draft DP 108 in its 
entirety first to understand the overall intent of the draft DP 108, and where sections 
of its content are cross-referenced, before beginning the task of identifying restricted 
information. Next, in reviewing the document, the author 102 should consider all 
references to U.S. Government export controlled military or commercial restricted 
content or information including technical data and details regarding: assembly, 
design, development, engineering, inspection, maintenance, manufacture, 
modification, production, processing, operation, overhaul, performance, 
reconstruction, repair, testing, use, etc., for removal from the document or draft DP 
108. However, there are situations where references to technical data, information 
and details are not considered to be export controlled under U.S. Government 
regulations and may be retained in the global export issued DP 118. The global 
export issued DP 118 is issued and exported under U.S. Department of Commerce 
export license exception, No License Required (NLR). The NLR exception is an 
example of an export license exception permitted under U.S. Government Department 
of Commerce regulations. 
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[0048] Some examples of technical data that are not considered restricted content 
include: technical data that provides only a description, general characteristics and 
expected performance; technical data which does not exceed that normally included in 
sales brochures, marketing data sheets or similar products that are readily available to 
the public (including competitors) at trade shows or other public events; and technical 
data that is composed of general scientific or engineering principles commonly taught 
in schools, colleges, universities or is in the public domain, e.g. information which is 
published and totally accessible or available to the public. 

[0049] In addition to identifying technical data and details, the author 102 has to 
review the document in step 304 to protect the proprietary information of the 
company and others from unauthorized disclosure. Proprietary information includes 
information in which its owner claims a property right to the exclusion of others. It 
includes technical and business information that gives the owner an opportunity to 
obtain an advantage over others, such as competitors or potential competitors, who do 
not have it, or that would adversely affect the position of the owner if made available 
to others. The author 102 in sanitizing a document has to identify and then mark or 
tag any proprietary information of the company or of others to prevent disclosure of 
that proprietary information. Only proprietary information that has been authorized 
by its owner for disclosure to all global or external sources should be included by the 
author 102 in the "sanitized" draft DP 110 and eventually in the global export issued 
DP 118. 

[0050] Figure 4 illustrates a flow chart of the process of tagging or marking the 
restricted information for removal in step 206 of Figure 2. To begin, after the 
document has been reviewed to identify restricted content in step 204 using the 
procedure in Figure 3, the author 102 identifies the specific starting and ending points 
of restricted content in the draft DP 108 in step 402. Preferably in step 402, the 
author 102 reads the draft DP 108 one paragraph or graphic at a time and then 
compares the content included in the paragraph or graphic to that content identified in 
step 204 and conservatively identifies the starting and ending points of any restricted 
content, preferably erring on the side of identifying the content of the paragraph as 
restricted content, if questionable. 
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[0051] The particular manner in which the author 102 eliminates or removes 
restricted content is a decision based on the sentence structure and context of the 
restricted content in the draft DP 108. First, the author 102 can have the complete 
removal of restricted content from the draft DP 108 and then collapse any spaces 
between the text or graphics. Alternatively, the author 102 can have the complete 
removal of restricted content from the draft DP 108, the collapsing of any spaces, and 
the insertion of a marker such as the word "deleted" in place of the text or graphic 
content removed. 

[0052] In step 404, the author 102 marks or tags the starting location of the 
restricted content identified in step 402 within the document or draft DP 108. In step 
406, the author 102 then highlights, marks or tags to the ending location of the 
restricted content to be removed from the draft DP 108. In step 408, the author 102 
designates how the removed content from draft DP 108 will be presented in issued DP 
114 and eventually in global export issued DP 118 through the use or non-use of a 
marker. An example of the markings within the draft DP 108 is illustrated in Figure 
7. 

[0053] If the author 102 decides to include a marker indicating the removal of 
material in the global export issued DP 118 in step 408, the author 102 toggles the 
sanitization application (or confirms that the sanitization application has been toggled) 
at step 408 to have the sanitization application insert the marker at the location where 
the restricted content has been removed. Alternatively, if the author 102 decides not 
to include a marker in the global export issued DP 118 in step 408, the author 102 
toggles the sanitization application (or confirms that the sanitization application has 
been toggled) at step 408 to have the sanitization application omit the marker from the 
location where the restricted content had been removed. 

[0054] In steps 404-406, the author 102 has to highlight or tag the starting and 
ending locations within the draft DP 108 of the restricted content to be removed. One 
way for the author 102 to highlight the restricted content for removal is to highlight 
the material in the draft DP 108 in a preselected color. When the highlighted draft DP 
108 is processed in step 208, the "sanitization" macro or program recognizes the 
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preselected color and removes the restricted content based on that preselected color. 
If the author 102, has toggled the sanitization application to include markers in step 
408, then the restricted content is highlighted in a preselected color that signals the 
"sanitization" macro to remove the restricted content and insert the marker. Similarly, 
if the author 102, has toggled the sanitization application to omit markers in step 408, 
then the restricted content is highlighted in a different preselected color that signals 
the "sanitization" macro to remove the restricted content without the insertion of a 
marker. In another embodiment of the present invention, the author 102, can toggle 
the inclusion of a marker by selecting an appropriate preselected color. In an alternate 
embodiment, the author 102 can highlight or select the material and then change the 
p style of the material to a predefined style understood by the "sanitization" macro. In 

J| addition, there can be one predefined style that signals the "sanitization" macro to 

F|f insert a marker and a different predefined style that signals the "sanitization" macro to 

p omit the marker. 

41 

[0055] In another embodiment of the present invention, instead of highlighting the 
restricted content to be removed, the author 102 can insert predefined tags into the 
p draft DP 108 that are understood by the "sanitization" macro of step 208 in removing 

gj the restricted content. The author 102 can use one set of predetermined tags, e.g. 

&SSD#, &SE#, to insert a marker in the location where restricted content was 
removed and another set of predetermined tags, e.g. &SS#, &SE#, to omit the marker 
from the location where the restricted content was removed. The sets of tags can each 
have a starting tag, e.g. &SSD#, &SS#, and an ending tag, e.g. &SE#, or the same tag 
can be used to indicate both the starting and ending points. The requirements and 
guidelines for controlling the insertion of the tags depend on the specific 
configuration of the "sanitization" macro. 

[0056] For example, a "sanitization" macro in step 208 can be configured to 
require that: the predetermined tags are to be inserted directly in front of, or directly 
behind the text of the restricted content; each starting tag must have a corresponding 
ending tag; and the tags cannot be nested. Furthermore, the author 102 can be 
required to apply the predetermined tags consistently within color or style formats or 
that the predetermined tags be in a specific style format, e.g. "DPText" or "Normal." 
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[0057] In one embodiment of the present invention, the "sanitization" macro in 
step 208 maintains the text font characteristics, graphic, figure, equation, or table 
positioning of the removed content in the global export issued DP log 116 and 
adequately maintains the same position and orientation of the remaining material in 
and around the same in the global export issued DP 118. In another embodiment, the 
text, graphic, figure, equation, table, or material removed from the global export 
issued DP 118 does not maintain any font characteristics or positional information 
within the global export issued DP log 1 16. 

[0058] When tagging or marking restricted content for removal, the author 102 
has to consider the content of the restricted content under consideration and how that 
information, if required, will be transferred to a global engineer 122 for their use. The 
author 102 also has to consider the form of the information that resides in the global 
export issued DP log 1 16 and how it can be productively used and/or transferred when 
required. The removal of complete areas of text, graphics, equations, list items, etc. 
from the global export issued DP 1 18 produces a simple and easy to understand global 
export issued DP log 1 16. However, the complete removal of subject matter in the 
global export issued DP 1 18 can make interpretation of the meaning and design intent 
of the global export issued DP 118 very difficult. To provide continuity between the 
issued DP 114 and the global export issued DP 118, the author can leave the section 
headings and title intact in the global export issued DP 1 18 as a reference. 

[0059] The author 102 can selectively remove restricted content in situations 
where the text, figures, tables, etc. can be removed without changing the context 
between the issued DP 114 and the global export issued DP 118. To assist the global 
engineer 122 in understanding the global export issued DP 118, the author 102 can 
have the marker "[deleted]" inserted into the global export issued DP 118 in those 
situations where the selective removal of restricted content changes the context of the 
global export issued DP 118 or renders the remaining material unreadable or 
grammatically incorrect. However, the author 102 has to also consider that by 
dividing up sentences and paragraphs with very small edits, a global export issued DP 
log 116 is created with entries that are difficult to understand. If a significant portion 
of a paragraph has restricted content, the author 102 can mark the entire paragraph for 
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deletion for an easier to read and understand global export issued DP log 116 and 
global export issued DP 1 18. 

[0060] In one embodiment of the present invention, the draft DP 108 can include 
one or more cross-references. Cross-references are used to automatically create 
hypertext links within the same document or to other documents. Captions within the 
draft DP 108 document, such as headings, figures, tables, equations, etc., can be 
cross-referenced in the document for easier use. The author 102 when marking the 
draft DP 108 has to match cross-references in the draft DP 108 with all equations, 
figures, and tables referenced to ensure that all restricted content is marked and 

M removed from the draft DP 108. 

'- = 

|l [0061] In another embodiment of the present invention, some draft DPs 108 can 

use footnotes as references. The editing of footnotes by the author 102 can be 
classified into one of two situations: (1) removal of restricted content that includes a 

J u footnote reference; or (2) removal of restricted content in the footnote itself. To 

explicitly remove the contents of a footnote, the author 102 has to identify and 

y highlight or tag the restricted content included within the footnote itself. The contents 

of the footnote will be omitted from the global export issued DP 118 and included in 

fif the global export issued DP log 1 16 as a separate entry. 

[0062] Figure 5 illustrates a flow chart of the process for executing the 
sanitization macro or routine in step 208 of Figure 2 on the marked or tagged draft DP 
108 to obtain the global export issued DP log 1 16 and the global export issued DP 1 18 
or the sanitized draft DP 110 and the sanitized draft DP log 112. To begin, after the 
document has been tagged to remove restricted content in step 206 using the 
procedure in Figure 4, the author 102 saves and closes the file with the draft DP 108 
in step 502. In step 504, the author 102 accesses a web site with macros or routines 
for sanitizing the marked or tagged draft DP 108. The author 102 uploads the tagged 
draft DP 108 to the web site in step 506 and confirms the successful upload of the 
draft DP 108 in step 508. In step 506, author 102 can upload the draft DP 108 to 
either a draft mode or approved mode of the sanitization macro. In draft mode, the 
sanitization macro is setup or configured to keep the most current version of the 
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sanitized draft DP 1 10. An upload to the web site overwrites any previous versions of 
the sanitized draft DP 110. However, in the approved mode, version control is 
maintained by the sanitization macro for issued DPs 1 14, global export issued DP logs 
116 and global export issued DPs 118 that have been approved and stored in the 
database. In step 510, the author 102 determines if the sanitization macro executed 
successfully. If the sanitization macro has executed successfully, the author 102 has 
to then wait for a e-mail notification in step 512, otherwise, the author returns to step 
504 and accesses the macro web site. 

[0063] Notification of macro completion status is e-mailed in step 512 back to the 
author 102 who uploaded the marked or tagged draft DP 108 in step 506. In one 
embodiment, the sanitization macro operates on a timed retrieval cycle (e.g. every 
three minutes). The sanitization macro will process, as a batch, all draft DPs 108 that 
are waiting in a queue at the start of a cycle. Thus, if there are many draft DPs 108 
waiting in the queue for processing, the entire batch is processed until completion, 
and then e-mail notifications of completion are sent out. For example, a single global 
export issued DP 118 can take around 5-10 minutes to create from a marked or tagged 
draft DP 108 having 50 pages and 30-40 data tags. In another embodiment of the 
present invention, the sanitization macro can process each draft DP 108, individually, 
as received. 

[0064] Proper execution of the sanitization macro relies on proper insertion of the 
data tags or on the proper marking or designation of document styles. In one 
embodiment of the invention, the sanitization macro processes the data tags or style 
markers, in a serial fashion, from left-to-right, top-to-bottom through the document. 

[0065] There are several error indicators that can occur during the processing of 
the sanitization macro. Once an error is corrected in the draft DP 108, the author 102 
has to reprocess the draft DP 108 to create another sanitized draft DP 110 and the 
sanitized draft DP log 112. The most common sources of sanitization macro 
processing errors caused by draft DP 108 document editing are incorrect insertion of 
data tags around restricted information content. 
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[0066] Figure 6 illustrates a flow chart of the process of verifying the removal of 
restricted content in step 210 of Figure 2. To begin, after the sanitization macro or 
routine has been processed on the draft DP 108 in step 208 using the procedure in 
Figure 5, the author 102 opens an e-mail notification of the completion of sanitization 
processing in step 602. Next, in step 604, the author 102 selects the appropriate links 
or URLs to be linked to a web page with the sanitized files. Depending on the web 
browser settings, the author 102 may then refresh the web page using the web browser 
in step 606 to view the latest changes. In step 608, the author 102 reviews the 
sanitized files for completeness and understanding. After reviewing the files in step 
608, the author notes any errors, corrections or other changes to the sanitized files in 
step 610. If there are not any errors or changes to the sanitized files, then the draft DP 
108, the sanitized draft DP 110 and the sanitized draft DP log 1 12 can be uploaded for 
review by reviewers 104 or approval by the approver 106. 

[0067] Preferably, the author 102 reads the global export issued DP 118 or the 
sanitized draft DP 110 without reference to the global export issued DP log 116 or the 
sanitized draft DP log 112, being cognizant of the fact that the external or global 
engineering resources can only have access to the global export issued DP 118. The 
author 102 can also note any areas where interpretation of the global export issued DP 
118 or the sanitized draft DP 110 intent would be difficult, misleading, or incorrect 
from the draft DP 108. In addition, the author 102 can verify that any restricted 
information that is significant to the intent of the draft DP 108 and removed to the 
sanitized draft DP log 112 or global export issued DP log 116 can easily be identified 
for expedient transfer to a global resource if necessary. The author 102 may have to 
readjust the data tags or markers to include a greater segment of information solely for 
this purpose. Finally, the author 102 can review the sanitized files for correct 
"remaining" content and systematic editing and processing errors. 

[0068] In one embodiment of the present invention, as a method of processing 
web pages for off-line viewing and for increasing the speed at which web pages load, 
the contents of the previously viewed web pages are stored locally on the author's 
computer as cache items. By default, the web pages stored locally as cache items are 
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displayed in the browser when a link in the e-mail notification is activated by the 
author 102. 

[0069] Figure 7 illustrates a draft DP 108 that has been marked or tagged in 
accordance with step 404-408. The draft DP 108 in Figure 7 has several sections of 
text and graphics 702 and 704 that have been marked or tagged. Section 702 has been 
marked in a style that corresponds to the removal of content from the document 
without the insertion of a marker 906 (see Figure 9). The content included in section 
702 is the text that has been removed in material removal section 902 (see Figure 9). 
Section 704 has different marking style from section 702. Section 704 has been 
marked in a style that corresponds to the removal of content from the document with 
the insertion of marker 906. The content included in section 704 is the content that 
has been removed in material removal section 904 (see Figure 9) and marked with 
marker 906. Similar marking of content is shown in Figure 7 through Figure 10 
representing removal of content in graphics and content included within table cells. 

[0070] Figure 8 illustrates an issued DP 1 14 that has been approved and uploaded 
to the database for viewing by authorized internal users 120. The issued DP 114 is 
similar to the draft DP 108 shown in Figure 7 in that the issued DP 114 shown in 
Figure 8 also has the marked or tagged sections 702 and 704. As discussed above, the 
issued DP 114 preferably includes a complete description and listing of all 
information. The information in the issued DP 114 is highlighted or marked 
substantially identical to that in the draft DP 108 so that an authorized internal user 
120 can quickly determine the material and information that is not going to be 
provided to the authorized global source 122 in the global export issued DP 1 18. 

[0071] Figure 9 illustrates a global export issued DP 1 18 that can be viewed by an 
authorized global engineer or external source 122. The global export issued DP 118 
is a sanitized version of the issued DP 114 shown in Figure 8. In the global export 
issued DP 118 shown in Figure 9, restricted content included in sections 702 and 704 
has been removed from the document at locations 902 and 904. At document removal 
location 904, a marker 906 indicating the removal of material from the global export 
issued DP 118 is displayed. The marker 906 in Figure 9 is "[deleted]," however any 
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type of marker can be used to indicate the removal of material from the global export 
issued DP 118. 

[0072] Figure 10 illustrates the global export issued DP log 116 that can be 
viewed by authorized internal users 120 and, after compliance with appropriate 
security and export control provisions, specific sections or portions of the global 
export issued DP log 116 can be transferred or viewed by authorized external sources 
or global engineers 122. The global export issued DP log 116 includes all the 
material that was marked for removal from the issued DP 1 14. The material included 
in the global export issued DP log 116 can maintain and utilize similar positioning 

},t and heading information as was used in the issued DP 1 14 to make the global export 

issued DP log 116 easier to understand and use in conjunction with the global export 

CP issued DP 118. 

ni 

1^. [0073] While the invention has been described with reference to a preferred 

^ embodiment, it will be understood by those skilled in the art that various changes may 

p be made and equivalents may be substituted for elements thereof without departing 

from the scope of the invention. In addition, many modifications may be made to 
^ adapt a particular situation to the teachings of the invention without departing from 

m the essential scope thereof. Therefore, it is intended that the invention not be limited 

to the particular embodiment disclosed as the best mode contemplated for carrying out 

this invention, but that the invention will include all embodiments falling within the 

scope of the appended claims. 
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